$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: E4nw0S74bVIjvatBN8NA+KOOh4xFvmcSOD9WHVyZHi0= Subject key identifier: 16:CF:49:25:5E:24:B7:E9:F5:3F:00:0C:24:3F:8C:D9:9A:F3:23:C1 Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0617 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 0611 Signing time: Wed 30 Jul 2025 23:15:15 +0000 Manifest this update: Wed 30 Jul 2025 23:15:15 +0000 Manifest next update: Wed 06 Aug 2025 23:15:15 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: bHxQ9L1RQrgrU5xBqtjzJWfytdmIzHFBmkDjGmeSC1w=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 Aug 2025 23:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1559 (0x617) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Jul 30 23:15:15 2025 GMT Not After : Aug 6 23:15:15 2025 GMT Subject: CN=688aa783-29cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:88:d8:86:d3:63:a1:39:d7:85:38:bc:f4: b3:77:fe:d7:b0:49:c2:0d:05:eb:b2:7d:83:0c:4f: cb:0a:f2:e6:1b:c4:e5:dd:8d:87:8f:aa:e4:87:60: f1:8a:19:7d:18:14:fd:63:60:fd:80:55:1a:ba:ee: e6:9b:e3:9e:64:f9:62:40:12:05:b5:7e:18:25:db: 9a:dd:16:21:4a:50:20:f6:c4:5d:5f:79:c2:7f:54: 9a:00:14:50:11:11:1e:1e:0d:10:35:83:38:0f:21: e9:7e:c4:0a:1a:39:0b:ac:65:73:5c:f1:2e:e7:77: ad:0b:24:0e:d9:ec:ca:2e:2b:e2:fd:f1:14:7a:da: b2:9a:b9:64:bd:82:42:f1:6a:8a:fd:6a:d5:cb:5c: 45:f2:3d:29:83:24:f1:b0:b4:67:3f:69:50:35:f0: 6b:3f:7c:6e:d8:8d:11:94:3d:ea:62:2a:ce:39:02: e2:8f:06:17:12:32:6c:0b:57:14:c1:52:3a:bf:a4: ee:76:f0:70:53:19:62:a0:6e:ec:dd:35:70:80:9b: 36:0a:c5:91:d8:95:22:05:06:2d:a8:2f:e6:4f:e4: 9b:ea:da:47:ad:eb:48:4e:4f:6c:60:6d:9f:6b:e6: c4:ea:0e:49:98:f2:12:8e:90:19:a6:ad:4a:cc:8a: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:49:25:5E:24:B7:E9:F5:3F:00:0C:24:3F:8C:D9:9A:F3:23:C1 X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2d:cd:21:78:35:77:af:95:bc:6b:bf:f4:dc:34:c4:12:21: d8:6d:61:81:b0:15:ef:76:22:40:5a:d3:48:5e:5a:cd:9b:9f: 30:22:e5:78:dc:a8:3a:45:37:88:c8:62:5a:fd:3c:8b:1c:06: bc:21:ad:44:90:17:56:0d:3d:d0:de:b1:57:92:c1:f6:c4:50: bd:77:91:ef:54:76:2e:14:e6:a1:2d:97:5a:62:bf:17:ef:5f: e1:ae:5a:b4:97:c4:3e:4a:4d:11:66:a2:25:d6:d5:c2:ed:70: ab:e4:9a:e4:4f:7b:34:de:d0:b3:99:06:4d:96:2e:27:17:d9: 8f:52:ec:ea:bf:39:c3:1b:ab:83:a6:ac:f1:54:7d:9c:44:c0: 36:ba:a3:41:d1:18:0b:92:07:15:0e:f8:83:b3:48:43:9e:60: d6:e9:74:5e:a6:31:ea:3f:1e:8c:6f:38:19:ec:b0:d4:ee:e0: 11:16:dd:07:27:1f:cd:d7:0b:5b:fa:77:d4:87:41:50:4b:34: 12:6f:f6:d4:ca:98:fc:bd:0e:19:24:a4:55:6c:fc:1e:4a:a8: e8:34:d7:10:a6:ca:4a:db:4e:79:da:4c:5e:3a:6a:df:b9:b0: b7:a2:f2:2b:ac:92:6e:2e:f5:6e:21:a8:cb:e4:e8:3f:1c:b9: ea:bb:63:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwNzMwMjMxNTE1WhcNMjUwODA2MjMxNTE1WjAYMRYwFAYD VQQDEw02ODhhYTc4My0yOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArB2I2IbTY6E514U4vPSzd/7XsEnCDQXrsn2DDE/LCvLmG8Tl3Y2Hj6rkh2Dx ihl9GBT9Y2D9gFUauu7mm+OeZPliQBIFtX4YJdua3RYhSlAg9sRdX3nCf1SaABRQ EREeHg0QNYM4DyHpfsQKGjkLrGVzXPEu53etCyQO2ezKLivi/fEUetqymrlkvYJC 8WqK/WrVy1xF8j0pgyTxsLRnP2lQNfBrP3xu2I0RlD3qYirOOQLijwYXEjJsC1cU wVI6v6TudvBwUxlioG7s3TVwgJs2CsWR2JUiBQYtqC/mT+Sb6tpHretITk9sYG2f a+bE6g5JmPISjpAZpq1KzIpQrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbPSSVe JLfp9T8ADCQ/jNma8yPBMB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChLc0heDV3r5W8a7/03DTEEiHYbWGBsBXvdiJAWtNIXlrNm58wIuV4 3Kg6RTeIyGJa/TyLHAa8Ia1EkBdWDT3Q3rFXksH2xFC9d5HvVHYuFOahLZdaYr8X 71/hrlq0l8Q+Sk0RZqIl1tXC7XCr5JrkT3s03tCzmQZNli4nF9mPUuzqvznDG6uD pqzxVH2cRMA2uqNB0RgLkgcVDviDs0hDnmDW6XRepjHqPx6MbzgZ7LDU7uARFt0H Jx/N1wtb+nfUh0FQSzQSb/bUypj8vQ4ZJKRVbPweSqjoNNcQpspK20552kxeOmrf ubC3ovIrrJJuLvVuIajL5Og/HLnqu2MK -----END CERTIFICATE-----Generated at Thu Jul 31 22:33:08 2025 by rpki-client